Security Engineer

Two95 International Inc.; United States; On-site; USD 120,000 - 160,000; Full time

Job summary

Two95 International Inc. is seeking an experienced IT security professional to join our security operations team. You will help design and maintain secure cloud-based systems across AWS and Azure, enforce access controls, and implement Akamai-based defenses to protect web applications.

The role requires strong experience in WAF, IDS, SIEM (ELK/Splunk), vulnerability management, and scripting in Python or Ruby, with a solid Linux and Windows hardening background and knowledge of PCI/SOX controls.

Qualifications

• Bachelor's degree or equivalent experience in a related field.
• 5+ years of IT security experience.
• 5+ years in IT systems administration.
• Experience with multi-cloud AWS and Azure environments.
• Akamai-based security experience is preferred.
• Containerized applications security understanding.
• Knowledge of WAF, IDS, and FIM platforms.
• Experience with SIEM tools (ELK, Splunk) and related monitoring.
• Vulnerability management using Nessus, OpenVAS, Qualys, Tenable.

Skills

Security governance

Ethics in security

Windows hardening

Linux

Scripting (Python, Ruby)

PCI/SOX knowledge

Cloud security (multi-cloud AWS/Azure)

Akamai security

Web app security (WAF/IDS/FIM)

SIEM experience (ELK, Splunk)

Vulnerability management tools (Nessus

Nessus/OpenVAS/Qualys/Tenable

CloudWatch/CloudTrail/CloudSOC

Education

Bachelor's degree in related field or equivalent experience

Tools

ELK Stack

Splunk

Nessus

OpenVAS

Qualys

Tenable

Job description

Education/Experience

• Bachelor's degree in related field or equivalent experience
• 5+ years? experience in IT security
• 5+ years of experience in IT systems administration
• Experience maintaining systems and access control in a multi-cloud environment (AWS and Azure)
• Significant experience with Akamai based security solutions.
• Fundamental understanding of security requirements of containerized applications
• Working knowledge of WAF (web application firewalls), IDS, and FIM platforms
• Experience with ELK, Splunk, and at least one SIEM platform
• Experience maintaining a vulnerability management program leveraging tools such as Nessus, OpenVAS, Qualys, Tenable, etc.
• Familiar with CloudWatch, CloudTrail, CloudSOC, or similar tools
• Knowledge of at least one scripting language (Python, Ruby, etc.)
• Strong ethics and understanding of ethics in business and information security
• Solid background in Windows desktop and server OS hardening and protection
• Solid background in Linux
• Working knowledge of PCI and SOX control and reporting requirements
• CISSP (or equivalent) security certification preferred